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PREFACE 

This study was initiated as Subtask 1, TNT Equivalency Study to NASA Study 
C-II, Advan -ed Missions Safety Studies . Other studies in this series are 
Subtask 2, l- ^ fety Analysis of Parallel versus Series Propellant Loading of 
the Space Shuttle (Aerospace Report No. ATR-71(7233)-1) and Subtask 3, 
Orbiting Propellant Depot Safety Study (Aerospace Report No. ATR-7i(7233)-3) . 

This study was supported by NASA Headquarters and managed by the Advanced 
Missions Office of the Office of Manned Space Flight, Mr. Herbert Schaefer, 
the Study Monitor, supported by Mr. Charles W. Childs of the NASA Safety 
Office, provided guidance and counsel that significantly aided this effort. 


Study results are presented in three volumes; these volumes are summarized 
as follows: 

Volume I; Management Summary Report presents a brief, concise 
review of the study content and summarizes the principal conclusions 
and recommendations. 

Volume II: Technical Discussion provides a discussion of the 
available test data and the data analysis. Details of an analysis 
of possible vehicle static faJure modes and an assessment of 
their explosive potentials are included. Design and procedural 
criteria are suggested to minimize the occurrence of an 
explosive failure. 

Volume III: Appendices contains supporting analyses and backup 
materiad. 






. 


-ui- 



ABSTRACT 



This study reevaluates the existing TNT equivalency criterion for LO^/LH^ 
propellant. It addresses the static, on-pad phase of the space shuttle launch 
operations and was performed to determine whether the use of a TNT equiv- 
alency criterion lower than that presently used (60%) could be substantiated. 
The large quantity of propellant on-board the space shuttle, 4X10^ lb, was 
considered of prime importance to the study. 

Furthermore, a qualitative failure analysis of the space shuttle (EOS) on the 
launch pad was made because it was concluded that available test data on the 
explosive yield of LO^/LH^ propellant was insufficient to support a reduction 
in the present TNT equivalency value, considering the large quantity of pro- 
pellcuit used in the space shuttle. The failure analysis had two objectives. 

The first was to determine whether a failure resulting in the total release of 
propellant could occur. The second was to determine whether, if such a 
failure did occur, ignition could be delayed long enough to allow the degree 
of propellant mixing required to produce an explosion of 60% TNT equivalency 
since the explosive yield of this propellant is directly related to the quantities 
of LH 2 and LO^ mixed at the time of the explosion. 

The analysis indicates that the occurrence of such a failure is unlikely and 
that a TNT equivalency of 20% would be a more realistic value for the static, 
oil -pad phase of the space shuttle launch operations. 
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1. INTRODUCTION 


The existing 60% TNT equivalency requirement for LO^/LH^ propellant is 
considered too conservative and too restrictive for use as a siting criterion 
for the space shuttle program. 

A reduction of this criterion would relax siting and operations •. constraints 
and effect a savings in facilities costs. It therefore becomes appropriate 
to review this criterion with respect to both existing test data and the results 
of a failure mode analysis of the shuttle vehicle in the static, on- pad con- 
figuration in order to determine whether a reduction in this criterion could be 
justified. 


2. STUDY OBJECTIVES AND CONSTRAINTS 

( 

2.1 OBJECTIVES 

The major objective of this study was to evaluate and recommend a new TNT 
equivalency criterion for LO 2 /LH 2 propellant for application to the static, 
on-pad operational phase of the space shuttle. The new criterion is to have 
as low a value as possible consistent with a reasonable level of confidence and 
hazard expectation. Further, the data were to be developed in a manner that 
would support a proposal to the Armed Services Explosive Safety Board 
(ASESB) requesting concurrence with the recommended criterion. 

2.2 CONSTRAINTS 

No additional tests were conducted. Therefore, the data analysis phase of 
this study was confined to the study of data produced by prior test programs. 
Most of this data was found not to be pertinent to this study. 

Design and operational criteria for the space shuttle were in the development 
phase: the failure analysis was therefore a gross, top-level effort. A further 


- 1 - 



reduction in recommended criteria may become possible as vehicle design 
progresses and details become more fully defined. 


3. RELATIONSHIP TO OTHER NASA EFFORTS 


The results of this study have a direct impact on several areas of the space 
shuttle program. The most significant of these are the following: 

• Identification of hardware design areas and of interface 
and operational constraints that shoiild be considered 
to minimize both the probability of failure and the 
explosive potential should such a failure occur 

• Development of *he normal operational and contingency 
safety plans 

• Establishment of facilities requirements to aid the 
Space Shuttle Facilities Group in its site selection 
efforts 


4. METHOD OF APPROACH 


The general plan followed in this study was to: 

• Collect and analyze existing data 

• Perform failure mode analyses 

• Evaluate and recommend new criteria 

5. RESULTS 

5.1 GENERAL 

Since this study was designed primarily to support the site selection and 
facilities planning activities, it was confined to the static, on«pad phase of 



operations, i.e., the time interval between the start of propellant loading and 
launch, including any hold time. 


The vehicle configuration and propellant weights used throughout the study 
are those shov/n in Fig. 1. 

5.2 DATA ANALYSIS 


5.2.1 Principal Investigator" 

The principal investigators whose test data and/or reports were selected for 
analysis are the following: 

• A. D. Little, Inc. 

• Aerojet General Corp. 

• Bellcomm, Inc. 

• National Aeronautics and Space Administration 

• University of Florida 

• URS Corp. (Project Pyro) 


5.2.2 Definition of Explosive Yield 

Explosive yield is defined: 


Yield (% TNT) = 


Equivalent iVeight of TNT 
Total Propellant Weight 


X 100 


5.2.3 Available Test Data 

A summary of test data from the maj>^r LO 2 /LH 2 propellant test programs is 
presented in Table 1. Most of these tests were conducted with propella' 
quantities of 225 lb or less; only 18 tests are reported for propellant 
weights in the 1000 to 91, 000- lb range. 




NOTE: DIMENSIONS AND WEIGHTS ARE APPROXIMATE 


Fig. 1. Typical Vehicle Configuration 
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5.2.4 Data Selected for Analysis 

Only Project Pyro reports provide test data for propellant test weights in 
excess of 225 lb; the largest was 91, 000 lb. Pyro data were therefore 
selected as the basis for the analysis. Data from the spill and the contact- 
type tests were excluded from the final analysis. The configurations and 
objectives of these tests were not considered representative of potential 
space shuttle failures. 

5.2.5 Data Indications 

It is indicated in Table 1 that explosive yields vary over a wide range. The 
data indicate a trend towards a smaller range and a lower maxim\am- yield 
value as propellant test weights increase. This downward trend may be 
questioned, however, since it is based on significantly fewer tests and test 
configurations than were employed in the small-scale tests, 

5.2.6 Data Evaluation 

The available test data do not define the explosive yields of pro- 

pellant in sufficient detail to support a recommendation for a generalized re- 
duction in the existing 60% TNT equivalency criterion; therefore a failure 
analysis was performed. 

5.3 FAILURE ANALYSIS 

5.3.1 Fault Tree 

Figure 2 presents the top of the fault tree. The tree was developed to a level 
sufficient to identify failures that could lead to the release and possible ignition 
of propellant. Typical conditions analyzed are listed below: 

• Tank overpressure 

• Tank collapse 

• Orbiter dropped 

• Vehicle tipover 

• Lightning strike 

• Fire 

• Tank struck by foreign object 

• Vehicle propellant system failure 
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5.3.2 Assessment of Explosive Potential 

5.3.2. 1 Existing Criterion 

The existing 60% TNT equivalency criterion is based on the total weight of 
propellant on-board the vehicle. In addition, it assumes a total release and 
mixing of the and prior to ignition. 

5. 3. 2. 2 Multiple Tank Failures 

Figure 3 shows the distribution of the main propulsion propellant on-board 
wUe space shuttle. If one assumes that a multiple failure of these tanks were 
to occur and that ignition could be delayed long enough to produce a TNT ex- 
plosive yield equivalency of 60% of the weight of the propellant spilled, then 
the yields shown in Table 2 might be obtained. However, the analysis indi- 
cates that the simultaneous failure of multiple tanks is an extremely remote 
possibility, particularly in combinations involving both vehicles. Further, 
the analysis demonstrates that the nature of many of the ignition sources 
precludes a delay sufficient for appreciable mixing prior to ignition. There- 
fore, the resulting yields should be low. 

Table 2. Explosive Yield for Some Tank Failures 


Source 

No. Tanks 

Propellant 
Released, 
106 lb 

Yield Ratio, ^ 
% TNT 

Orbiter Total 

32 

1 

0.6 

9.0 

All Except Booster LO2 

4 

1.1 

16.5 

Booster Total 

2 

3.4 

51.0 

Vehicle Total 

5 

4.0 

60.0 


^ Yield Ratio = 


0. 6 X Weight of Propellant Released . 
Total Propellant Weight 


2 

Orbiter May Have Three Separate Tanks or One Tank with Common 
Bulkhead 
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booster 


OR BITER 



total 3.4 X 10® lb 


* 0.25 X 10® lb 
PER TANK 


Fig. 3. 


PropelUat Distribution 
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5. 3. 2. 3 Single Tank Failures 

The analysis shows that single tank failures resulting in gross propellant 
release are also unlikely. However, should a single tank failure occur, the 
most critical would be the failure of the tanks. If one assumes that such 

a gross failure were to occur in either the booster or the orbiter tank 

(with a 60% TNT equivalency), the maximum yield would correspond to 7. 5% 
of the total weight of propellant on-board the vehicles for a booster failure 
and 1. 5% for an orbiter failure. The explosioi from these single tank failures 
could rupture additional tanks and release their propellant. Since the fire 
produced by the initial failure would provide a nearly instantaneous ignition 
source, mixing time for the secondary propellant release would be very short, 
and a correspondingly low explosive yield would result. Most of the propellant 
released in the secondary failure would probably only add to the magnitude 
of the existing fire. 

5. 3. 2.4 Vehicle Propellant System Leakage 

Accumulation of due to leakage in the vehicle propellant system can 

result in low-energy explosions. These explosions could rupture adjacent 
propellant tanks and result in relatively high-order secondary explosions. 

A leak-detection system coupled with a GN^ purge system capable of main- 
taining the minimum suggested GN 2 /GH 2 ratio (see Table 3) will inhibit 
explosions due to GH^ leakage. This assumes that the system purges the 
areas in which lecikage might occur to a minimum 95% GN^ atmosphere prior 
to propellant loading. It also assumes that the GH^ from maximum allowable 
leakage of all components is uniformly dispersed. 





6. CONCLUSIONS 


The failure analysis indicates that 2:0% TNT equivalency is a realistic value 
for the space shuttle during the static, on-pad phase of operations. However, 
the existing test data are considered insufficient to support a recommendation 
for a generalized reduction in the current explosive hazard criterion for 
LO^/LH^ propellant. This conclusion is based on the assumption that the 
final vehicle configuration will be similar to the one analyzed. 


7. SUGGESTED ADDITIONAL EFFORT 


The desirability of additional testing at high propellant test weights should be 
considered. A cost study is suggested to assess the cost vs return of such a 
test program. If feasible, an in-depth test plan should be developed to assure 
the maximum data return for the minimum testing. 

It may become appropriate to reevaluate this study when the vehicle design 
becomes firm. Such an analysis might result in a lower TNT equivalency 
value for the space shuttle than can be substantiated at this time. 
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